Re: Advice Needed On Recent Rootings

[Olaf Dietsche <olaf+list.debian-security@olafdietsche.de>]

Jayson Vantuyl <kagato@souja.net> writes:

> Thankfully, we don't have root passwords.  In our space, we find root to
> more of a concept than a user, so we disable the password and set up a
> group that can su to root.  That way we have a good handle on things.
> Root never logs in, so we know somethings up if we see that.  Also, if
> it is hacked from a su-able user, we get a log of that too.  I highly
> recommend this set up (although it wasn't enough in our case :).

Just curious, how do you su to root, if root's password is disabled?
Do you have a modified su replacement?

Regards, Olaf.